| ID |
CVE-2022-23088
|
| Summary |
The 802.11 beacon handling routine failed to validate the length of an IEEE 802.11s Mesh ID before copying it to a heap-allocated buffer.
While a FreeBSD Wi-Fi client is in scanning mode (i.e., not associated with a SSID) a malicious beacon frame may overwrite kernel memory, leading to remote code execution. |
| References |
|
| Vulnerable Configurations |
|
| CVSS |
| Base: | None |
| Impact: | |
| Exploitability: | |
|
| Access |
| Vector | Complexity | Authentication |
|
|
|
|
| Impact |
| Confidentiality | Integrity | Availability |
|
|
|
|
| Last major update |
15-02-2024 - 06:23 |
| Published |
15-02-2024 - 05:15 |
| Last modified |
15-02-2024 - 06:23 |
